One-time bootstrap

Create platform owner

Compare the submitted token digest to ADMIN_BOOTSTRAP_TOKEN_HASH. This route disables itself once an owner exists.

Generate securely on this device

Safari creates a 32-byte token and its SHA-256 hash locally. Nothing is transmitted when you generate or copy them.

Go to admin login